357 matches found
openSUSE Security Update : compat-openssl097g (compat-openssl097g-1548)
The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...
SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6656)
The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...
RedHat Security Advisory RHSA-2009:1579
The remote host is missing updates announced in advisory RHSA-2009:1579. The Apache HTTP Server is a popular Web server. A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handle session renegotiation. A man-in-the-middle attacker could use this flaw t...
RedHat Security Advisory RHSA-2009:1579
The remote host is missing updates announced in advisory RHSA-2009:1579. The Apache HTTP Server is a popular Web server. A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handle session renegotiation. A man-in-the-middle attacker could use this flaw t...
SLES11: Security update for libopenssl
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libopenssl098 openssl openssl-doc More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...
SLES11: Security update for libopenssl
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libopenssl098 openssl openssl-doc More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...
CentOS Security Advisory CESA-2009:1580 (httpd)
The remote host is missing updates to httpd announced in advisory CESA-2009:1580. CESA-2009:1580 66275 2 $Id: ovcesa20091580.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1580 httpd Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CentOS Security Advisory CESA-2009:1579 (httpd)
The remote host is missing updates to httpd announced in advisory CESA-2009:1579. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...
SLES10: Security update for OpenSSL
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: compat-openssl097g More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...
SuSE 11 Security Update : OpenSSL (SAT Patch Number 1544)
The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues
------------------------------------------------------------------------ Debian Security Advisory DSA-1934-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 16, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1934-1] New apache2 packages fix several issues
------------------------------------------------------------------------ Debian Security Advisory DSA-1934-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 16, 2009 http://www.debian.org/security/faq -...
DSA-1934-1 apache2 - several issues
Bulletin has no description...
Authentication flaw
Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11.0, Receiver for iPhone before 1.0.3, and ICA Java, Mac, UNIX, and Windows Clients for XenApp and XenDesktop allows remote attackers to impersonate the SSL/T...
Moderate: Red Hat Security Advisory: httpd security update
Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the way the...
httpd security update
2.0.52-41.ent.6.0.1 - use oracle index page oracleindex.html - update vstring and distro in specfile 2.0.52-41.ent.6 - add security fixes for CVE-2009-3555, CVE-2009-1891, CVE-2009-3094, and CVE-2009-3095 534039...
httpd security update
2.2.3-31.0.1.el54.2 - replace index.html with Oracle's index page oracleindex.html - update vstring and distro in specfile 2.2.3-31.2 - add security fixes for CVE-2009-3094, CVE-2009-3095, CVE-2009-3555 534041...
CVE-2009-3555
creationtimestamp| type| source ---|---|--- 2009-11-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10071 2009-12-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10579 2025-03-19 13:54:17+00:00| seen|...
The renegotiation vulnerability in SSL protocol
The renegotiation vulnerability in SSL protocol Severity: major CVE-2009-3555 Not vulnerable: 0.8.23+, 0.7.64+ Vulnerable: 0.1.0-0.8.22...
CVE-2009-3555
The TLS and SSL 3.0 (and possibly earlier) protocols, used in various products including Microsoft IIS 7.0 , mod_ssl in Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla NSS 3.12.4 and earlier, and multiple Cisco products, fail to properly associate r...